This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/O-gxnsHzDhdYKwTNHTFr-Ch9dJM.roa File: O-gxnsHzDhdYKwTNHTFr-Ch9dJM.roa (raw, json) Hash identifier: kVKhuC0dJOQWPqNSK7n1W9Bj9SrxDJpJnAeLYtUm8Yw= Subject key identifier: 3B:E8:31:9E:C1:F3:0E:17:58:2B:04:CD:1D:31:6B:F8:28:7D:74:93 Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73 Certificate serial: 019B77C6742E7BDF006F3470F36505BDFB9E Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/O-gxnsHzDhdYKwTNHTFr-Ch9dJM.roa Signing time: Thu 01 Jan 2026 04:17:33 +0000 ROA not before: Thu 01 Jan 2026 04:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41354 IP address blocks: 193.39.182.0/24 maxlen: 24 193.39.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:74:2e:7b:df:00:6f:34:70:f3:65:05:bd:fb:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73 Validity Not Before: Jan 1 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3be8319ec1f30e17582b04cd1d316bf8287d7493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d7:46:ae:cf:b0:06:0b:26:9d:80:e5:29:f1: db:70:87:82:c6:9b:a3:29:cd:d0:bb:71:9f:45:be: d0:a4:3d:c2:bc:30:ae:d7:1a:34:db:f3:6d:b7:3a: 5f:32:8b:a2:2e:43:0b:8d:11:61:f3:7a:df:9c:08: 7c:33:ad:87:27:05:9b:f7:d0:b6:21:2f:75:f9:ce: 0c:a3:94:fe:da:c2:18:0b:08:9c:28:0c:3a:93:9c: 97:36:9c:ef:70:bd:ef:23:4e:f3:c6:c4:66:4d:d6: cf:1a:58:5a:fe:a0:ce:5e:ed:88:8f:66:10:e4:51: fa:77:ea:32:dc:b7:0b:1f:11:cd:6f:25:47:d4:56: e5:70:e1:b6:6a:7e:9b:c7:47:24:66:92:74:93:3a: 10:88:4c:6b:47:15:d1:b4:a9:ae:63:35:e6:00:50: 0a:64:ff:44:7e:6e:29:d8:60:d8:94:01:35:e5:13: 74:62:a8:ac:f3:b1:fe:57:9f:5e:e2:8d:58:a1:38: 40:80:03:02:90:1c:57:7f:a9:d1:ab:2e:1f:4e:e6: f2:77:9c:0f:87:a0:c9:98:dc:8e:db:fb:08:28:8b: ee:02:79:2c:5d:2c:58:31:3d:d7:9b:f6:5a:f0:4c: 3f:64:eb:23:1b:48:5b:63:8c:69:86:9a:ef:71:bb: 19:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E8:31:9E:C1:F3:0E:17:58:2B:04:CD:1D:31:6B:F8:28:7D:74:93 X509v3 Authority Key Identifier: keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/O-gxnsHzDhdYKwTNHTFr-Ch9dJM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.39.182.0/23 Signature Algorithm: sha256WithRSAEncryption 19:36:69:7f:43:ed:08:3c:3e:82:cc:f6:38:3d:7d:d8:90:ad: 03:d1:32:56:08:94:45:db:c5:d4:74:af:59:57:a3:a8:83:9f: 76:de:22:39:0a:c9:23:32:67:07:85:7c:96:0b:25:98:43:29: 44:1c:c1:0f:ba:ae:82:32:6c:78:00:53:2e:ab:7c:94:49:c1: bd:4c:36:e6:9a:c9:06:e1:2d:76:ee:c2:2b:17:1e:54:fa:f4: d7:ee:7c:8c:73:d8:4e:8d:fc:0b:98:b6:ea:f9:ac:73:89:45: e3:7d:2e:dc:b0:3c:52:10:86:b9:e2:6f:ff:81:c4:e9:df:4e: 0f:f5:bb:36:7d:cf:b9:61:f7:a1:f5:72:6f:b3:52:24:56:0f: d1:c7:d7:fa:85:f5:a2:16:11:0b:29:e7:53:7f:d9:e0:66:a9: e7:eb:9c:8a:a6:3a:f7:c4:62:ff:44:08:bf:65:ed:67:41:08: 30:68:bf:f6:ba:fa:2a:ee:96:33:38:60:00:6c:a2:c1:15:c5: 9f:bd:a8:43:b5:9f:2d:2d:64:6f:f5:42:00:7b:16:d5:21:dc: 7f:67:ae:f7:1f:13:ef:a3:cc:33:4f:77:6e:93:7f:48:fd:47: f1:14:c6:c7:f1:94:73:4b:7a:f5:49:89:23:f2:3b:bb:4c:de: e8:5b:bb:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xnQue98AbzRw82UFvfueMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZTY3MGE2ZWQ0Yzc4ZmRkNzc2ODY3OTJmN2UwODc1OTg5 MDZmNzMwHhcNMjYwMTAxMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmU4MzE5ZWMxZjMwZTE3NTgyYjA0Y2QxZDMxNmJmODI4N2Q3NDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttdGrs+wBgsmnYDlKfHbcIeCxpuj Kc3Qu3GfRb7QpD3CvDCu1xo02/NttzpfMouiLkMLjRFh83rfnAh8M62HJwWb99C2 IS91+c4Mo5T+2sIYCwicKAw6k5yXNpzvcL3vI07zxsRmTdbPGlha/qDOXu2Ij2YQ 5FH6d+oy3LcLHxHNbyVH1FblcOG2an6bx0ckZpJ0kzoQiExrRxXRtKmuYzXmAFAK ZP9Efm4p2GDYlAE15RN0Yqis87H+V59e4o1YoThAgAMCkBxXf6nRqy4fTubyd5wP h6DJmNyO2/sIKIvuAnksXSxYMT3Xm/Za8Ew/ZOsjG0hbY4xphprvcbsZkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDvoMZ7B8w4XWCsEzR0xa/gofXSTMB8GA1UdIwQY MBaAFNzmcKbtTHj913aGeS9+CHWYkG9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09ad3B1MU1lUDNYZG9aNUwzNElkWmlRYjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9lMzE4MDQtNjI3MC00MjQ2LTkxMDAt ZjA2ZTIzNDMyMjczLzEvTy1neG5zSHpEaGRZS3dUTkhURnItQ2g5ZEpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9lMzE4MDQtNjI3MC00MjQ2LTkxMDAtZjA2ZTIzNDMyMjcz LzEvM09ad3B1MU1lUDNYZG9aNUwzNElkWmlRYjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSe2MA0G CSqGSIb3DQEBCwUAA4IBAQAZNml/Q+0IPD6CzPY4PX3YkK0D0TJWCJRF28XUdK9Z V6Oog5923iI5CskjMmcHhXyWCyWYQylEHMEPuq6CMmx4AFMuq3yUScG9TDbmmskG 4S127sIrFx5U+vTX7nyMc9hOjfwLmLbq+axziUXjfS7csDxSEIa54m//gcTp304P 9bs2fc+5Yfeh9XJvs1IkVg/Rx9f6hfWiFhELKedTf9ngZqnn65yKpjr3xGL/RAi/ Ze1nQQgwaL/2uvoq7pYzOGAAbKLBFcWfvahDtZ8tLWRv9UIAexbVIdx/Z673HxPv o8wzT3duk39I/UfxFMbH8ZRzS3r1SYkj8ju7TN7oW7uO -----END CERTIFICATE-----Generated at Mon Jan 26 06:03:00 2026 by rpki-client